Is the following statement the best way to handle a username/password validation $username and $password are form fields $result=""; $result= mysql_query (" Select password from ACCT_TBLE where (ACCT_NUM = '$username' and PASSWORD='$password')"); Now my question is will result be equal to "" if the query statement doesn't return any data? thanks randy -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]